Quote:
Originally Posted by LoneAngelIbesu
Checking file extensions won't prevent malicious users from uploading executable files. You need to check file headers. Essentially, you would use loadlines() to load the first line of the file, and you would check if the file header is located within that. (For instance, GIF files always start with "GIF8").
In the end, though, there's nothing you can do if somebody really wants to upload malicious files. Even checking headers doesn't do much, since the person can simply edit the file header. Hopefully getting an error, even after they've changed extensions, would just make them give up.
|
Oh, well that I didn't know, thanks
I'll rep tomorrow.
But honestly, what normal player is smart enough to know that?
